This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: UbaQpmGcc+IneL8BbQ/NBOIq8XjHWaSkVdLncTROcNY= Subject key identifier: A3:8A:4D:65:41:E8:BC:55:18:4B:79:BD:94:C8:E8:AC:70:47:F2:8D Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 065E Signing time: Tue 30 Dec 2025 21:52:12 +0000 Manifest this update: Tue 30 Dec 2025 21:52:11 +0000 Manifest next update: Tue 06 Jan 2026 21:52:11 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: Qhbwlc5UnA2lzUj2UmErvXq4ri50sYiH2ef03OfU8ow=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: JNSnvB3lv0/9vnQPkUAqkaUeoo68hc8fXSyVzWlD/Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: Dec 30 21:52:11 2025 GMT Not After : Jan 6 21:52:11 2026 GMT Subject: CN=6954498b-3de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:6b:2f:25:22:75:03:f0:f2:e5:01:68:90: 95:14:6b:e3:97:bf:f1:a2:89:b7:02:6e:39:31:91: ae:bf:9c:61:72:45:5b:74:95:1c:a4:ac:55:04:1a: 8c:7f:12:86:a5:fd:ef:a1:af:8a:94:6c:35:02:40: cb:77:b0:af:93:ae:fd:60:32:8e:38:c8:03:b7:1b: 99:ac:8a:e7:9b:66:bf:dd:f5:18:14:37:5a:21:58: b2:ff:fb:9e:31:95:b2:fd:d0:ba:df:02:0b:d8:b3: 16:1c:8e:85:24:52:9f:d8:bb:91:28:69:6e:4e:ad: 6d:97:9f:91:2f:af:07:76:4e:7c:64:26:cf:53:90: 7f:f9:4e:f4:19:f6:72:26:42:cc:ec:12:0c:0c:fa: d2:97:13:f2:a5:ae:d3:34:d0:2e:51:83:20:d2:c3: 11:f0:6f:66:3c:94:30:c2:6f:74:b6:2f:42:aa:45: e1:b6:31:9d:e2:90:77:4f:48:84:14:3b:89:d4:4d: 29:41:21:29:52:85:a5:bf:7b:68:55:e3:e9:5c:1c: 95:79:35:33:bd:60:b3:61:2a:5e:3b:c7:a6:a0:8f: 37:b0:54:9d:9c:1c:ea:c7:f0:d0:de:e3:55:87:11: c7:06:26:37:ee:50:b2:be:a0:06:8a:47:59:7a:b2: d4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8A:4D:65:41:E8:BC:55:18:4B:79:BD:94:C8:E8:AC:70:47:F2:8D X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d7:3e:80:0c:39:64:e8:ab:41:d1:d2:26:28:08:70:96:ef: 5d:01:9f:ab:b5:e8:8c:6c:c6:f9:62:39:ec:fb:57:02:a8:00: a2:12:49:44:2c:66:13:e2:68:d6:f6:1b:66:ed:1d:3f:34:d3: d5:ae:98:be:28:39:76:a6:c0:90:54:9e:ed:a2:45:ec:46:43: d9:7e:51:15:83:1e:d4:0a:06:e6:81:c3:8b:f2:18:20:8c:7e: 94:7b:e7:66:05:4e:57:c4:cc:7e:03:7b:83:b3:66:85:eb:8b: 7c:ab:ac:35:20:11:d8:dc:e6:c1:f7:bd:99:30:fd:3b:58:b8: c3:8d:4e:dd:63:36:6c:ab:09:5f:8b:6d:a2:8f:a1:b5:43:bc: 38:d1:ee:e8:fa:8f:9f:77:63:1e:72:eb:13:a3:1e:a2:9a:80: 7d:50:19:c8:32:ab:71:6b:8c:cf:e4:d0:e6:d1:c0:06:ba:f2: 4d:5e:76:3b:d7:ff:e3:f7:d4:49:c3:5d:80:6b:b6:5c:70:62: 4d:8b:a9:75:2b:78:b0:94:e8:7d:a8:56:e4:72:46:ee:2e:70: 1a:0a:9a:e2:df:c7:6d:00:e1:27:f2:5a:bb:56:76:31:99:ac: 9f:03:fa:f3:0c:29:1d:19:73:dd:e4:04:f8:21:26:7b:39:33: 18:ec:a5:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjUxMjMwMjE1MjExWhcNMjYwMTA2MjE1MjExWjAYMRYwFAYD VQQDDA02OTU0NDk4Yi0zZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsxrLyUidQPw8uUBaJCVFGvjl7/xoom3Am45MZGuv5xhckVbdJUcpKxVBBqM fxKGpf3voa+KlGw1AkDLd7Cvk679YDKOOMgDtxuZrIrnm2a/3fUYFDdaIViy//ue MZWy/dC63wIL2LMWHI6FJFKf2LuRKGluTq1tl5+RL68Hdk58ZCbPU5B/+U70GfZy JkLM7BIMDPrSlxPypa7TNNAuUYMg0sMR8G9mPJQwwm90ti9CqkXhtjGd4pB3T0iE FDuJ1E0pQSEpUoWlv3toVePpXByVeTUzvWCzYSpeO8emoI83sFSdnBzqx/DQ3uNV hxHHBiY37lCyvqAGikdZerLUGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOKTWVB 6LxVGEt5vZTI6KxwR/KNMB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ1z6ADDlk6KtB0dImKAhwlu9dAZ+rteiMbMb5Yjns+1cCqACiEklE LGYT4mjW9htm7R0/NNPVrpi+KDl2psCQVJ7tokXsRkPZflEVgx7UCgbmgcOL8hgg jH6Ue+dmBU5XxMx+A3uDs2aF64t8q6w1IBHY3ObB972ZMP07WLjDjU7dYzZsqwlf i22ij6G1Q7w40e7o+o+fd2MecusTox6imoB9UBnIMqtxa4zP5NDm0cAGuvJNXnY7 1//j99RJw12Aa7ZccGJNi6l1K3iwlOh9qFbkckbuLnAaCpri38dtAOEn8lq7VnYx mayfA/rzDCkdGXPd5AT4ISZ7OTMY7KXQ -----END CERTIFICATE-----Generated at Wed Dec 31 00:22:31 2025 by rpki-client